CVE-2026-18849: IBM OpenBMC Code Execution
IBM OpenBMC FW1060.00 through FW1060.80 is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.
Other sources
Power Systems Firmware is affected by a vulnerability in the BMC firmware update process. An attacker with authenticated administrator-level access to the BMC can, under specific conditions, execute arbitrary code, resulting in a confidentiality, integrity, and availability impact.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Power Systems BMC firmware (OpenBMC)to a version that resolves this vulnerability.Fixed in FW1060.81(1060_191)Patch FW1060.81(1060_191)
Event History
Frequently Asked Questions
Who is realistically able to exploit this issue?
Exploitation requires authenticated administrator-level access to the BMC. The attack vector is adjacent-network access, so the attacker must be able to reach the BMC through the relevant network path.
Which firmware versions are identified as affected?
IBM OpenBMC firmware versions FW1060.00 through FW1060.80 are identified as affected. The issue is in the BMC firmware update process.
What is the impact if exploitation succeeds?
An attacker may execute arbitrary code on the BMC under specific conditions. This can affect confidentiality, integrity, and availability.